Test your basic knowledge |

MCTS

Subjects : certifications, mcts, it-skills

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. What is required to upgrade Vista to Windows 7?
The latest Vista Service Pack
To display friendly labels to capture packet address headers.
ISATAP Routers within an orginization - 6TO4 routers to transverse the internet - and TEREDO to traverse a NAT devise.
Increase the minimum size of your paging file. Windows sets the initial minimum size of the paging file equal to the amount of random access memory (RAM) installed on your computer plus 300 megabytes (MB) - and the maximum size equal to three times t

2. What does servermanagercmd.exe do?
Use dnscmd /recorddelete
IPSEC
Clicking and dragging a window to the right or left side of the desktop causes the window to fill the respective half of the screen. Snapping a window to the top of the desktop maximizes it. Resizing a window to touch the top or bottom edge of the sc
Command line equilivant of Server Manager. You can install/remove roles and features on server 2008?

3. What does DRIVERQUERY /SI do?
You will be prompted to reconnect online. To disable offline mode - select it from the Tools menu.
EAP authentication needs to be enabled for remote access authentication (dial up - VPN - wireless) -.
On the properties of the DNS server in the DNS manager.
It will display driver signing status

4. What is an example of a rule based on file attributes derived from the digital signature?
WPA-Personal (uses a preshared key)
they are enforced and will not allow a user to exceed the space limit.
It is a advertisement of a service. The record is configured with the service provided - a port number and weight?
For example - you can create rules based on the publisher attribute that is persistent through updates - or you can create rules for a specific version of a file.

5. How can Transparent Caching is be enabled?
Delete all the zone files or reinstall the DNS service.
Through Group Policy at Computer configuration | Administrative Templates | Network | Offline Files | Enable Transparent Caching.
They relay the status on polices to the Security center for NAP to validate the system to use the network.
Also known as root scalability mode. Allows organizations with more than 16 namespace servers use consistency mode. They poll the nearest dc every hour instead of the pdc emulator. This reduces network traffic to the pdc emulator but clients might ha

6. What does PNPUTIL.EXE do?
It insert drivers into the Windows Driver Store so that users can add the associated PNP hardware without having to provide the driver or administrator credentials
At the volume level - not the drive level.
It sees if your PC is ready for Windows 7. It scans your hardware - devices - and installed programs for known compatibility issues - gives you guidance on how to resolve potential issues found - and recommends what to do before you upgrade.
Add an AD integrated zone

7. How do you create a custom Windows PE image that supports windows scripting host?
The DFS service attempts to keep the domain based namespace highly consistent by polling the pcd emulator after the namespace changes. This bypasses the needing to wait for the ad replication to update the namespace object. This can increase load on
Specify this file with both the ScanState and LoadState tools to migrate all user folders and files that resides on the root of any drive and in the Users directory. However - it does not find and migrate any application data - program files - or any
DHCPv6 obtains additional configuration settigns.
Modify the PE image using DISM by adding the WINPE-Scripting package to BOOT.WIM

8. How do you setup Windows 7 setup to run unattended?
Only sites added to the local Intranet Zones
It will display driver signing status
Run: Cscript slmgr.vbs /dl
You create an answer file and place it on removable media. By default - Windows Setup will search the root directory of all removable media for an answer file called Autounattend.xml.

9. You can configure ____________ in group policy.
Backups of the full system including all critical volumes (volumes that contain operating system state).
DNS suffix search lists
It will display driver signing status
IPV4 and IPV6

10. How many bits are in the GLOBAL/UNIQUE LOCAL prefix?
Writes changes to a mounted WIM file - DISM /UNMOUNT-WIM /DISCARD will roll the changes back
They are in the first 48 bits /48
ISATAP Routers within an orginization - 6TO4 routers to transverse the internet - and TEREDO to traverse a NAT devise.
One of the tunnels if DirectAccess by using both a computer certificate and user credentials. This tunnel authenticates the user and provides access to intranet resources and application servers.

11. What does the MigDocs.xml file do?
The requesting of user authentication prior to connecting to the terminal server. This completes the user aoth before reaching the logon screen making the server more secure. This helps fight Denial of Service attacks - malicious users/software.
Comes with the Windows Automated Installation Kit (WAIK)
Specify this file with both the ScanState and LoadState tools to migrate all user folders and files that resides on the root of any drive and in the Users directory. However - it does not find and migrate any application data - program files - or any
Anew vpn protocol that uses SSL (port 443) for encryption.

12. What is User Account Control (UAC)?
Netsh add dnsserver. Example netsh interface ipv4 add dnsserver name="Local Area Connection" 192.168.0.1 index=3
First the local link address sends a router discovery packet (Router Solicitation message). If the router request is received then a Public address corrosponding to the global or unique local address prefix in the message.
Conditional forward
It is a security component that enables users to perform common tasks as non-administrators - called standard users in Windows 7 - and as administrators without having to switch users - log off - or use Run As.

13. What is the command to configure the preferred DNS server?
Computer certificates be installed on client computers
A new feature in Windows 7 and Windows Server 2008 R2 that replaces the Software Restriction Policies (SRP) feature. One of the advantages of Applocker rules over SRP is you can assign a rule to a security group or an individual user.
Netsh set dnsserver. Example: netsh interface ipv4 set dnsserver name="Local Area Connection" source=static address=192.168.0.100
Cannot be in different domains

14. How can non Microsoft PCs connect to print services?
Print services for unix can be configured to share out with the LPD (Line Printer Daemon) and clients send print jobs to LPD using LPR (Line printer remote) client software.
vssadmin.exe. This can view previous version files as well.
They are monitored but not enforced. Users can exced there quota limit.
Divide up a large WIM file into multiple smaller .SWM files

15. How do you create a VPN connection?
Is a command-line tool for managing BCD stores. It can be used for a variety of purposes - including creating new stores - modifying existing stores - adding boot menu options - and so on. BCDEdit serves essentially the same purpose as Bootcfg.exe on
Installing and imaging on hardware agnostic systems as long as the processor architecture is the same (32 or 64 bit)
Use the "Connect to a Workplace" option
Subtract the number of bits in the mask from 32 bits (255.255.255.255). Take the result (x) and have 2 to the power of the result (2^x). Subtract that final result by 2 and that is the amount of host addresses available.

16. What service has to be started for Applocker to work?
The Application Identity Service
L2TP uses IPSEC to encrypt VPN traffic - PKI is needed to issue certificates that are required by IPSEC.
In Windows 7 and Windows Server 2008 R2 it enhances the productivity of mobile workers by connecting them seamlessly and more securely to their corporate network any time they have Internet access—without the need to VPN. When your IT department enab
Setup a GlobalNames zone.

17. What is Touch UI?
They need to be configured us use 802.1x RADIUS authentication
Schedule reports - monitor attempt to save unauthorized files - and generate reports instantly.
vssadmin.exe. This can view previous version files as well.
Windows Aero was revised to be more touch-friendly.

18. What is exFAT?
A new Microsoft proprietary file system supported in Windows 7 which is intended for flash drives but often called FAT64 - limit of 264 bytes (16 Exabytes).
Problem Steps Recorder in the Windows 7 operating system is a feature that enables users to record their interactions with an application and provide a detailed screen-by-screen view with accompanying information including mouse clicks and keyboard i
L2TP uses IPSEC to encrypt VPN traffic - PKI is needed to issue certificates that are required by IPSEC.
Sett up a priority for the preferred smtp server.

19. How do you setup multiple mx records?
Sett up a priority for the preferred smtp server.
To display friendly labels to capture packet address headers.
Use the "Connect to a Workplace" option
Ping the Link Local Address (FE80 Address)

20. How do you have a Firewall rule apply only to a specific computer?
WPA-Personal (uses a preshared key)
L2TP uses IPSEC to encrypt VPN traffic - PKI is needed to issue certificates that are required by IPSEC.
WPA-Enterprise (radius authentication)
Create a Custom Rule. By default Predefined Firewall Rules apply to all computers sending network traffic.

21. What is a mx record?
Place unhealthy computers in a quarantined network and auto-remediate clients.
Take the number of networks and take the square root of it. Subtract that number from the subnet mask. The result is the original mask.
A roecord to indicate the smtp server.
They are monitored but not enforced. Users can exced there quota limit.

22. How do you create a subscription?
It can be used to configure an unattended install of Windows 7. The answer file is now an XML file instead of an INF file. You should to use Windows System Image Manager to create the XML file. To use this XML file - copy it to c:windowssystem32syspr
EAP authentication needs to be enabled for remote access authentication (dial up - VPN - wireless) -.
So you can use a system management solution - such as Microsoft System Center Configuration Manager 2007 - to deliver the database to multiple computers and then use the SDBInst.exe command-line tool to install the database. The SDBInst command-line
Using wecutil -cs in an xml file.

23. In case the _______________ - DHCP clients can be configured with an alternative static ip address?
Configure the enforcement points as RADIUS clients.
DHCP server cannot assign an ip address
Adds a file based zone
IN the WindowsUpdateClient log in the system log portion of event viewer.

24. What does User Rights policy governs?
Netsh set dnsserver. Example: netsh interface ipv4 set dnsserver name="Local Area Connection" source=static address=192.168.0.100
Who can shutdown a computer
WPA-Personal (uses a preshared key)
Run Disk Cleanup and click Clean up system files. If you are prompted for an administrator password or confirmation - type the password or provide confirmation. Click the More Options tab - under System Restore and Shadow Copies - click Clean up. In

25. What do DFS nameservers need to do to obtain the most current namespace data?
A new feature in Windows 7 and Windows Server 2008 R2 that replaces the Software Restriction Policies (SRP) feature. One of the advantages of Applocker rules over SRP is you can assign a rule to a security group or an individual user.
Pool Active Directory.
On the zone file of the DNS server in the DNS manager.
ImageX utility can extract the required operating system edition directly to the attached VHD file in Windows 7.

26. What are WIM files used for?
Yes
The Deployment Image Servicing and Management (DISM) tool replaces the pkgmgr - PEImg - and IntlConfg tools that are being retired in Windows 7. DISM provides a single centralized tool for performing all of the functions of these three tools in a mor
Is a command-line tool for managing BCD stores. It can be used for a variety of purposes - including creating new stores - modifying existing stores - adding boot menu options - and so on. BCDEdit serves essentially the same purpose as Bootcfg.exe on
Installing and imaging on hardware agnostic systems as long as the processor architecture is the same (32 or 64 bit)

27. What is Bootsect.exe?
You can allow by adding the device vendor's GUID to the allow list in a GPO.
4 (bits 53 - 56) /56 Allows for 16 regions
Updates the master boot code for hard disk partitions to switch between BOOTMGR and NTLDR. You can use this tool to restore the boot sector on your computer. This tool replaces FixFAT and FixNTFS.
Some information—such as cookies and temporary Internet files—so that the webpages you visit will work correctly. However - at the end of your InPrivate Browsing session - this information is discarded.

28. What are hard disk quotas?
A feature that regularly creates and saves information about your computer's system files and settings. System protection also saves previous versions of files that you've modified. It saves these files in restore points - which are created just befo
Enforce IPSEC on the network
Does not have
they are enforced and will not allow a user to exceed the space limit.

29. What are the proven - standards-based technologies that DirectAccess is built on?
The ICMP protocol.
One of the tunnels if DirectAccess by using a computer certificate. This tunnel provides access to an intranet Domain Name System (DNS) server and domain controller - allowing the computer to download Group Policy objects and to request authenticatio
Use it to generate an EFS user certificate
Internet Protocol security (IPsec) and Internet Protocol version 6 (IPv6).

30. What does DISM /UNMOUNT-WIM /COMMIT do?
Either from wbadmin or windows server backup.
A new feature in Windows 7 and Windows Server 2008 R2 that replaces the Software Restriction Policies (SRP) feature. One of the advantages of Applocker rules over SRP is you can assign a rule to a security group or an individual user.
Netsh set dnsserver. Example: netsh interface ipv4 set dnsserver name="Local Area Connection" source=static address=192.168.0.100
Writes changes to a mounted WIM file - DISM /UNMOUNT-WIM /DISCARD will roll the changes back

31. Where is the Troubleshoot option for fixing common problems located?
It enables you to surf the web without leaving a trail in Internet Explorer. This helps prevent anyone else who might be using your computer from seeing where you visited and what you looked at on the web. You can start InPrivate Browsing from the ne
Devices and Printers Control Panel applet has a
It pings with IPV6
Forward to another DNS server

32. What is s stub zone?
Contains a list of dynamically updated list of authorities for the zone.
The system will shut down. The next time you start this system (after cloning it) - it will install with the settings in the XML file. The Computer Name will be automatically generated.
4 (bits 49 - 52) /52 Allows for 16 regions.
Use it to generate an EFS user certificate

33. What does the MigApp.xml file do?
Specify this file with both the ScanState and LoadState tools to migrate all user folders and files that resides on the root of any drive and in the Users directory. However - it does not find and migrate any application data - program files - or any
Specify this file with both the ScanState and LoadState commands to migrate application settings to computers running Windows Vista or Windows 7.
It will display driver signing status
It lets you launch process on a remote machine via command line. Example: winrs -r:(remotehost) ipconfig /all

34. What is Drvload?
Restrict when a child can logon to a computer.
The import and export affects the entire policy. For example - if you export a policy - all of the rules from all of the rule collections are exported - including the enforcement settings for the rule collections. If you import a policy - the existin
Tools adds out-of-box drivers to a booted Windows PE image. It takes one or more driver .inf files as inputs.
Use the "Connect to a Workplace" option

35. What is a ns record?
The ICMP protocol.
In the registry. To bind to another computer remotly the remote registry service needs to run on the target PC.
Yes - This involves picking the user certificate of the user you are sharing the file with. If that user does not already have a preinstalled certificate - then have them logon and encrypt a file for the first time and EFS will autogenerate a new cer
It designates an authoritative DNS server - not the soa record.

36. What does MISEXEC.EXE do?
They need to be configured us use 802.1x RADIUS authentication
Hovering over a taskbar icon shows thumbnail of that program. Hovering over the thumbnail shows a preview of that program in full view. Aero Peek also refers to the "Show desktop" button to the far right of the new taskbar.
Install Windows Installer Packages (.MSI) files. You can script the installation.
Either by placing data on a web server and enforcing ssl to be used to download or by using IPSEC on a file share.

37. How do you setup Ready Boost?
When you plug a ReadyBoost-compatible storage device into your computer - the AutoPlay dialog box offers you the option to speed up your PC using ReadyBoost. If you select this option - you can choose how much memory on the device to use for this pur
Issue a recovery agent certificate to a user and then import that certificate into a GPO that applies to the computer where that user will be allowed to recover any EFS encrypted files. EFS Data recovery agents are optional
Generates a space-estimate file called Usmtsize.txt. This option does not collect the user state. You must also specify /nocompress.
It is where Internet access is direct and not routed through the VPN - configure advanced TCPIP network properties and uncheck the option "Use Default Gateway on Remote Network".

38. What is DISM.EXE?
Drop both inbound and outbound traffic
Boot Configuration Database - Boot Configuration Data (BCD) files provide a store that is used to describe boot applications and boot application settings. The objects and elements in the store effectively replace Boot.ini.
Windows Vista - Window 7 and Server 2008.
The Deployment Image Servicing and Management (DISM) tool replaces the pkgmgr - PEImg - and IntlConfg tools that are being retired in Windows 7. DISM provides a single centralized tool for performing all of the functions of these three tools in a mor

39. What does "Create System Repair Disk" option do?
Creates a bootable CD that runs the Windows Recovery Environment (WRE)
IPSEC
Yes - Removable Storage Access policies within a GPO can be used to restrict user's access to devices like USB drives - CDDVD drives - Floppy Disks - Tape Drives - etc.
Create a customized shell

40. Why would you use audit-only mode?
To deploy the policy and understand its impact before enforcing it.
Drop both inbound and outbound traffic
Windows XP and Server 2003.
EARLY CHILDHOOD - EVERYONE - EVERYONE 10+ - TEEN - MATURE - ADULTS ONLY - RATING PENDING

41. Where is Reliability Monitor data kept?
DNS suffix search lists
Use the BCDEDIT.EXE command
Use IPCONFIG or Status Details for the Network Connection.
In the registry. To bind to another computer remotly the remote registry service needs to run on the target PC.

42. What is a reservation?
A way of assigning a staic address based on the mac address. This ensures each time the client receives the same address.
When you plug a ReadyBoost-compatible storage device into your computer - the AutoPlay dialog box offers you the option to speed up your PC using ReadyBoost. If you select this option - you can choose how much memory on the device to use for this pur
By caching reads to remote files over a slow network in the Offline Files (CSC) cache. Subsequent reads to the same file are then satisfied from the client (cache) after verifying the integrity of the cached copy.
They relay the status on polices to the Security center for NAP to validate the system to use the network.

43. What is InPrivate Browsing?
EAP authentication needs to be enabled for remote access authentication (dial up - VPN - wireless) -.
It enables you to surf the web without leaving a trail in Internet Explorer. This helps prevent anyone else who might be using your computer from seeing where you visited and what you looked at on the web. You can start InPrivate Browsing from the ne
A WDDM driver for the graphics card and a Windows Experience index of 3.0 or greater.
Modify the PE image using DISM by adding the WINPE-Scripting package to BOOT.WIM

44. Why would a secondary DNS server stop responding to client queries?
The system will shut down. The next time you start this system (after cloning it) - it will install with the settings in the XML file. The Computer Name will be automatically generated.
All you have to do is purchase an upgrade key from Microsoft or another authorized retailer to unlock those new features.
This happens because the zone records expire. This occurs because the secondary zone has not successfully zone transferred before the "Expires After" SOA.
They are written in XML and be created using the Windows System Image Manager or a text editor like notepad.

45. How does AppLocker reduce administrative overhead and help administrators control how users can access and use files - such as executable files - scripts - Windows Installer files - and DLLs?
Specify this file with both the ScanState and LoadState tools to migrate all user folders and files that resides on the root of any drive and in the Users directory. However - it does not find and migrate any application data - program files - or any
The DHCP server will ping an ip address before assigning it.
Drop both inbound and outbound traffic
It contains new capabilities and extensions that you can: Define rules based on file attributes - Create exceptions to rules - Import and export rules - and use audit-only mode.

46. What requirements needs to be met to use network level authentication?
Client needs Remote Desktop Connection 6.0 or above - Client must use an os that supports CredSSP (Credential Security Support Providoer) - The terminal server must user windoes 2008 and above.
They are designed to provide concise and impartial information about the content in computer and video games so consumers - especially parents - can make an informed purchase decision. ESRB ratings have two equal parts: rating symbols suggest age app
Create a Custom Rule. By default Predefined Firewall Rules apply to all computers sending network traffic.
If your computer is running slowly or isn't working properly - you can use System Restore to return your computer's system files and settings to an earlier point in time using a restore point. For more information about System Restore - see System Re

47. What is a HomeGroup?

48. How many bits are in the site subnet?
IPsec to authenticate both the computer and user - allowing IT to manage the computer before the user logs on. Optionally - you can require a smart card for user authentication. It also leverages IPsec to provide encryption for communications across
They are monitored but not enforced. Users can exced there quota limit.
Expose a WIM file contents through Windows Explorer. You can run BCDEDIT.EXE against the mounted image to create or modify the image's boot configuration database.
8 (bits 57 - 64) /64 Allows for 256 subnets in each site.

49. NAP can be configured to ____________.
Either by placing data on a web server and enforcing ssl to be used to download or by using IPSEC on a file share.
Place unhealthy computers in a quarantined network and auto-remediate clients.
Modify the PE image using DISM by adding the WINPE-Scripting package to BOOT.WIM
Enforce IPSEC on the network

50. What do you modify to define CD Autoplay settings and file associations?
8 (bits 57 - 64) /64 Allows for 256 subnets in each site.
Default Programs Control Panel applet
Either from wbadmin or windows server backup.
Updates the master boot code for hard disk partitions to switch between BOOTMGR and NTLDR. You can use this tool to restore the boot sector on your computer. This tool replaces FixFAT and FixNTFS.